Privacy Policy
Last updated: April 7, 2026
The short version: we collect only what we need to run the service, we encrypt your Planning Center credentials, and we never sell your data or use it for advertising.
PCOWidget is operated by Comp Edge Solutions. This policy explains what information we collect, how we use it, and the choices you have.
Information We Collect
Account information. When you sign up, we collect your church or organization name, contact email address, website URL, and Planning Center Online (PCO) credentials (Application ID and Personal Access Token).
PCO credentials. Your PCO Personal Access Token is encrypted using AES-256 before being stored. It is never transmitted to your browser and is used only to fetch your church's public calendar events from the PCO API on your behalf.
Usage data. We log API requests including timestamp, endpoint, response time, and HTTP status code for rate limiting and reliability purposes. These logs do not contain personally identifiable information.
Widget Builder cookies. The Widget Builder saves your API key in a browser cookie (pcow_builder_key) so you do not have to re-enter it on each visit. This is a functional cookie. It is not used for advertising or cross-site tracking. We also store a consent acknowledgment cookie (pcow_cookie_ok).
How We Use Your Information
- To authenticate API requests from your embedded widget
- To fetch and display your church's Planning Center calendar events
- To send transactional emails such as your welcome message and account details
- To send internal admin notifications when a new account is created
- To enforce rate limits and detect abuse
We do not sell your information. We do not use your information for advertising.
Data Storage and Security
Your data is stored on servers in the United States (DigitalOcean). PCO credentials are encrypted at rest. All connections use HTTPS.
Cookies
We use functional cookies only. No advertising or analytics cookies are set by PCOWidget. Here are the cookies we use:
- pcow_builder_key -- Stores your API key in the Widget Builder. Expires after 365 days. First-party only.
- pcow_cookie_ok -- Records that you acknowledged this cookie notice. Expires after 365 days. First-party only.
You can clear these at any time through your browser settings or by clicking "Clear" in the Widget Builder.
Third-Party Services
- Planning Center Online. We make API calls to PCO on your behalf using your credentials. PCO's own privacy policy applies to data held in your PCO account.
- Google Fonts. Some pages load the Inter font from Google Fonts, which may set cookies per Google's own privacy policy.
Your Rights
You may request deletion of your account and associated data at any time by emailing us. We will remove your record within 30 days.
Contact
Questions about this policy? Email us at steve@compedgesolutions.us.